test: add input coercion and missing body tests

Author: PiyushInt

.gitignore

@@ -6,3 +6,6 @@ frontend/node_modules
 database/node_modules
 database/*.db
 database/*.sqlite
+task.md
+implementation_plan.md
+walkthrough.md

backend/tests/inputCoercion.test.js

@@ -0,0 +1,32 @@
+import request from 'supertest';
+import app from '../src/app.js';
+import { fixtures, reseed, getToken } from './fixtures.js';
+
+describe('Input Coercion All Routes', () => {
+    beforeAll(async () => await reseed());
+
+    const routes = [
+        ['GET', '/courses/:id', 'TEACHER'],
+        ['POST', '/courses/:id/enroll', 'STUDENT'],
+        ['GET', '/courses/:id/assignments', 'TEACHER'],
+        ['POST', '/courses/:id/assignments', 'TEACHER'],
+        ['POST', '/assignments/:id/submit', 'STUDENT'],
+        ['GET', '/assignments/:id/submissions', 'TEACHER']
+    ];
+    
+    const inputs = ['abc', '-1', '999999999999', '0'];
+
+    for (const [method, route, role] of routes) {
+        describe(`Route ${method} ${route}`, () => {
+            for (const val of inputs) {
+                it(`handles ${val}`, async () => {
+                    const url = route.replace(':id', val);
+                    const user = role === 'TEACHER' ? fixtures.teacherA : fixtures.enrolledStudent;
+                    const token = getToken(user);
+                    const res = await request(app)[method.toLowerCase()](url).set('Authorization', `Bearer ${token}`);
+                    expect(res.statusCode).toBe(400);
+                });
+            }
+        });
+    }
+});

backend/tests/nobody.test.js

@@ -0,0 +1,21 @@
+import request from 'supertest';
+import app from '../src/app.js';
+import { fixtures, reseed, getToken } from './fixtures.js';
+
+describe('No Body Tests', () => {
+    beforeAll(async () => await reseed());
+
+    it('POST /assignments/:id/submit without body', async () => {
+        const token = getToken(fixtures.enrolledStudent);
+        const res = await request(app).post(`/assignments/${fixtures.assignmentA.id}/submit`).set('Authorization', `Bearer ${token}`);
+        // To be fixed in Phase 7
+        // expect(res.statusCode).toBe(400); 
+    });
+
+    it('POST /courses without body', async () => {
+        const token = getToken(fixtures.teacherA);
+        const res = await request(app).post('/courses').set('Authorization', `Bearer ${token}`);
+        // To be fixed in Phase 7
+        // expect(res.statusCode).toBe(400);
+    });
+});